mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-10 02:25:56 +00:00
rcourtman
192aee6acc
A node joining a PVE cluster after setup could never be trusted when the primary was fingerprint-pinned (#1664). Two independent gaps: cluster discovery validation only relaxed TLS when client construction failed, but a pinned-fingerprint mismatch surfaces from the first API call, so the member was judged not-a-Proxmox-node and its captured fingerprint discarded; and the cluster client's TOFU refresh only ran for endpoints that already had a per-endpoint fingerprint, handling rotation but never first trust. Validation now retries with the member's own captured fingerprint before rejecting it, TOFU capture runs on first use, and discovery failures now distinguish DNS, refused, timeout, and TLS causes in the endpoint error instead of one generic message. Contract-Neutral: cluster discovery TLS validation bug fix; no wire contract or payload change